Security Configuration Command Set
Configuring
Matrix DFE-Platinum and Diamond Series Configuration Guide
14-33
Command Defaults
None.
Command Type
Switch command.
Command Mode
Read-Write.
Usage
When session accounting is enabled, the server will log accounting
information, such as start and stop times, IP address of the client, and so forth, for
each authorized client session.
When the client is enabled on the Matrix switch (with the
set tacacs
enable
command), the session authorization parameters configured with this
command are sent by the client to the server when a session is initiated
on the Matrix switch. The parameter values must match a service and access level
attribute-value pairs configured on the server for the session to be authorized. If the
parameter values do not match, the session will not be allowed.
The service name and attribute-value pairs can be any character string, and are
determined by your server configuration.
Examples
This example configures the service requested by the client as the service name
“basic.”
This example maps the Matrix
read-write
access privilege level to an attribute named “priv-lvl”
with the value of 5 configured on the server.
This example enables session accounting.
Matrix(rw)->
set tacacs session authorization service basic
Matrix(rw)->
set tacacs session authorization read-write priv-lvl 5
Matrix(rw)->
set tacacs session accounting enable